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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the application: 

1 . (Currently Amended) An apparatus for performing exponentiations, comprising: 

a set of computational devices containing first and second subsets, wherein the first 
subset has a plurality of members which are chained together such that the devices of the first 
subset can operate both independently and as members of a first computational chain, and 
wherein the second subset has a plurality of members which are chained together such that the 
devices of the second subset can operate both independently and as members of a second 
computational chain distinct from said first computational chain; and 

a chaining controller adapted to instruct the first subset of devices to act as a first 
computational chain when the apparatus is required to perform an exponentiation of a first size, 
and being further adapted to instruct the second subset of devices to act as a second 
computational chain when the apparatus is required to perform an exponentiation of a second 
size distinct from said first size. 

/^ - apparatus for p e rforming computations comprising: 
a chaining controller; 
a plurality of computational d e vic e s; 

wh e r e in a first chaining subset of the plurality of computational devices includes 
at least two of tho plurality of computational d e vic es ; and wherein tho chaining controller is 
configured to instruct the first chaining subcot to op e rat e as a first computational chain. 

2. (Currently Amended) The apparatus of Claim 1 , wherein said th e plurality of 
computational devices are compris es exponentiators, and wherein wh e r e by the first 
computational chain comprises a first exponentiation chain. 

3. (Original) The apparatus of Claim 2, further comprising a hardware state controller for each 
exponentiator of the first exponentiation chain, wherein each hardware state controller 
includes replicated fanout control logic. 
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4. (Original) The apparatus of Claim 3, wherein the replicated fanout control logic is 
configured to allow exponentiators of the first exponentiation chain to chain without delay due to 
high fanout. 

5. (Original) The apparatus of Claim 3, wherein the replicated fanout control logic is 
configured such that state machines of the first exponentiation chain sequence efficiently. 

6. (Original) The apparatus of Claim 2, wherein each exponentiator further comprises a custom 
multiplier datapath; and wherein each custom multiplier datapath is configured so that the length 
of its longest wire is short. 

7. (Original) The apparatus of Claim 6, wherein the custom multiplier datapaths of chained 
exponentiators are physically mirrored to each other so that the wire length between the 
two is short. 

8. (Original) The apparatus of Claim 6, wherein the custom multiplier datapath has a serpentine 
layout so that the wire length between the most separated adjacent data locations is short. 

9. (Currently Amended) The apparatus of Claim 2, wherein the number of exponentiators in 
the plurality of exponentiators equals 2 k , and wherein wh e r e in k is a non-negative nonnegativ e 
integer. 

10. (Original) The apparatus of Claim 9, wherein k equals 2. 

11. (Original) The apparatus of Claim 9, wherein each exponentiator is adapted to exponentiate 
a 5 12-bit number. 

12. (Currently Amended) The apparatus of Claim 2, wherein the number of exponentiators in 
the first exponentiation chain equals 2 k wherein k is a positive integer. 
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1 3. (Currently Amended) The apparatus of Claim 1 2, further comprising: 

a second exponentiation chain; 
wherein the second a s e cond chaining subset of th e plurality of expon e ntiators includes at 
least two of the plurality of exponentiator s. wherein ; wh e rein the chaining controller is 
configured to instruct the second chaining subset to operate as a second exponentiation chain* 
and wherein ; whoroin no exponentiator of the first exponentiation chain is part of the second 
exponentiation chain. 

14. (Original) The apparatus of Claim 2, wherein each exponentiator further comprises: 

a cleave/merge engine; 

wherein the cleave/merge engine is configured to: 
receive AA, which is a 2w-bit number; 

calculate Ai and A2, which are two w-bit numbers based on AA; and 

output Aj and A2; 
wherein the cleave/merge engine is also configured to: 

receive Bi and B2, which are two w-bit numbers; 

calculate BB, which is a 2w-bit number based on Bt and B2; and 

output BB; 
wherein exponentiation of AA yields BB; 
wherein exponentiation of Ai yields Bi; 
wherein exponentiation of A 2 yields B 2 ; and 
wherein w is a positive integer. 

15. (Original) The apparatus of Claim 14, wherein Ai and A 2 are calculated from AA, and BB is 
calculated from Bi and B 2 , using a scalable Chinese Remainder Theorem implementation. 

16. (Original) The apparatus of Claim 15, 

wherein each exponentiator is adapted to perform 1024-bit exponentiation; 
wherein, if 2048-bit exponentiation is required, the chaining controller causes the 
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first exponentiation chain to comprise two exponentiators; and 

wherein, if 4096-bit exponentiation is required, the chaining controller causes the 
first exponentiation chain to comprise four exponentiators. 

17. (Original) A system for computing comprising: 

a computing device; 

at least one apparatus of Claim 1; and 

wherein the computing device is configured to use the apparatus of Claim 1 to. 
perform computations. 

18. (Currently Amended) A method for encrypting/decrypting data comprising: 

providing a 1024-bit number X: and 
encr\ptinfi/decrvpting X by 

loading argum e nt X into session m e mory; memory. 

loading argum e nt K into sosoion momory; 

cleaving X mod P to compute compute Xg. 



merging Cp and Cq to compute C; compute C. wherein C is a 1024-bit number. 



wherein the method further comprises (a) selecting one of a plurality of session controller of 32 
availabl e session controllers; (b) setting the busy bit for the one session controlle r, wherein th e 
argum e nt X is a 1 024 bit number, and wherein C io a 102 4 bit number ; and (c) clearing the busy 
bit for the one session controller. 






and 



retrieving C from the session memory; 



19. (Cancelled) The method of Claim 18, further comprising: 

selecting one session controller of 32 available session controllers; 
setting the busy bit for the one session controller; 
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wherein the argument X is a 1024-bit number; 

wherein C is a 1024-bit number; and 

clearing the busy bit for the one session controller. 

20. (Original) The method of Claim 18, further comprising: 

selecting two session controllers of 32 available session controllers; 
setting the busy bits for the two session controllers 
wherein loading argument X into session memory includes: 

loading part of the argument X into the session memory of one of the two 
session controllers; 

loading the remainder of the argument X into the session memory of the 
other of the two session controllers; 
wherein the argument X is a 2048-bit number; 
wherein C is a 2048-bit number; and 
clearing the busy bits for the two session controllers. 

21. (Original) The method of Claim 18, further comprising: 

selecting four session controllers of 32 available session controllers; 
setting the busy bits for the four session controllers 
wherein loading argument X into session memory includes: 

loading a first part of the argument X into the session memory of a first of 

the four session controllers; 
loading a second part of the argument X into the session memory of a 

second of the four session controllers; 
loading a third part of the argument X into the session memory of a third 

of the four session controllers; 
loading the remaining of the argument X into the session memory of a 

fourth of the four session controllers; 
wherein the argument X is a 4096-bit number; 
wherein C is a 4096-bit number; and 
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clearing the busy bits for the four session controllers. 

22. (Original) The method of Claim 18, 

wherein the cleaving X mod P comprises: 
setting A[513:0] - X[1023:51O]; 

calculating Z[1026:0] - A[513:0] x /d>[512:0], wherein pP[512] = 1; 

setting B[513:0] = Z[1026:512]; 

setting C[513:0] = X[513:0]; 

calculating Y[1025:0] = B[513:0] x P[51 1 :0]; 

setting D[513:0] - Y[513:0]; 

calculating E[513:0] = C[513:0] - D[513:0]; 

if E > P then calculating E = E - P; 

ifE>PthenE = E-P;and 

setting X P = E[5 1 1 :0] as the result of the cleaving X mod P, whereby Xp 
equals X mod P; and 
wherein the cleaving X mod Q comprises: 
setting A[513:0] -X[1023:510]; 

calculating Z[1026:0] = A[513:0] x #iQ[512:0], wherein fiQ [5 12] = 1; 

setting B[513:0] =Z[1026:512]; 

setting C[513:0]=X[513:0]; 

calculating Y[ 1025:0] =B[5 13:0] x Q[51 1:0]; 

setting D[513:0] = Y[513:0]; 

calculating E[S13:0] = C[513:0] - D[513:0]; 

if E > Q then calculating E = E - Q; 

if E > Q then E = E - Q; and 

setting Xq= E[51 1:0] as the result of the cleaving X mod Q, whereby Xq 
equals X mod Q. 

23. (Original) The method of Claim 18, wherein merging Cp and Cq to compute C comprises: 

if C P > P then calculating C P = C P - P; 
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if C Q > Q then calculating Cq - Cq - Q; 

calculating A[5 12:0] = C Q [51 1:0] - C?[511 :0); 

if A < 0 then calculating A[5U:0] = A[511:0] + Q[511:0]; 

calculating B[l 023:0] = A[5ll:0] x P 1 [511:0]; 

calculating D[511:0] = Cleave B[1023:0] mod Q[511:0], wherein ^Q[512] = 1; 
calculating E[1023:0] = D[5 1 1:0] x P[5 1 1 :0]; 
calculating C[l 023:0] - E[1023:0] + Cp[5Il:0]; and 
wherein C[1023:0] is the result of merging Cp and Cq. 

24. (Previously Presented) The apparatus of claim 1 , wherein said chaining controller is 
adapted to implement a flexible chaining algorithm. 

25. (New) The method of Claim 18, wherein X is data which is to be encrypted. 

26. (New) The method of Claim 1 8, wherein X is data which is to be decrypted. 

27. (New) The method of claim 18, wherein the session controller selected is one 32 
available session controllers. 

28. (New) A device for performing computations, comprising: 

a plurality of exponentiators; and 

a chaining controller adapted to arrange a first group of said exponentiators into a first 
computational chain when the device is required to process exponentiations of a first size, and 
being further adapted to arrange a second group of said exponentiators into a second 
computational chain when the device is required to process exponentiations of a second size 
distinct from said first size. 

29. (New) The device of claim 28, wherein said plurality of exponentiators operate 
independently when the device is required to process exponentiations of a third size distinct from 
said first and second sizes. 
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30. (New) The device of claim 28, wherein said third size is IK. 



31. (New) The device of claim 28, wherein said first size is 4K. 



32. (New) The device of claim 28, wherein said second size is 2K. 



33. (New) The device of claim 28, wherein the first and second groups are mutually 
exclusive. 



34. (New) The device of claim 28, wherein said device is adapted to perform RSA 
exponentiations. 

35. (New) The device of claim 28, wherein each of said plurality of exponentiators is 
adapted to simultaneously process eight IK exponentiations, four 2K exponentiations, or two 8K 
exponentiations. 

36. (New) The device of claim 28, wherein said chaining controller is a direct memory 
access controller which is adapted to load arguments and control information into the internal 
memory and registers of said plurality of exponentiators. 

37. (New) The device of claim 36, wherein said chaining controller is further adapted to 
retrieve exponentiation results from the memory of said plurality of exponentiators. 

38. (New) The device of claim 36, wherein said chaining controller is further adapted to 
retrieve exponentiation results from the memory of said plurality of exponentiators via a single 
burst-capable thirty-two bit bus interface. 

39. (New) The device of claim 28, wherein each of said plurality of exponentiators is 
independently connected to said chaining controller. 



9 



PAGE 12/21 * RCVD AT W7/2008 5:41 :1 1 PM [Eastern Daylight Time] * SVR:USPTO-EFXRF-5/0 * DNIS:2738300 * CSID:512 343 4530 ■ DURATION (mm-ss): 04-56 



Sep 07 06 04:1 5p ' Reiha Bernfel'd 



512-343-4530 



p.13 



Atty. Docket No.: LYRN006US0 
Customer ID No. 58,293 

40. (New) The device of claim 28, wherein the memories of said plurality of exponentiators 
map into a single global address. 

41. (New) The device of claim 28, wherein the memories of said plurality of exponentiators 
map into a single global address. 

42. (New) The device of claim 36, wherein each of said plurality of exponentiators 
comprises a plurality of session controllers, and wherein each of said plurality of session 
controllers is adapted to process separate exponentiations concurrently. 

43. (New) The device of claim 42, wherein each of said plurality of exponentiators 
comprises a single set of computation hardware shared between the plurality of session 
controllers in a pipelined manner. 

44. (New) The apparatus of Claim 1, wherein each exponentiator is adapted to perform 
1024-bit exponentiation. 

45. (New) The apparatus of Claim 44, wherein said chaining controller is adapted to instruct 
the first subset of devices to act as a first computational chain when the apparatus is required to 
perform a 2048-bit exponentiation. 

46. (New) The apparatus of Claim 45, wherein said chaining controller is adapted to instruct 
the second subset of devices to act as a second computational chain when the apparatus is 
required to perform a 4096-bit exponentiation. 

47. (New) The apparatus of claim 46, wherein the first computational chain comprises two 
exponentiators. and wherein the second computational chain comprises four exponentiators. 
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48. (New) The apparatus of claim 46, wherein at least some of the exponentiators in the first 
computational chain are also in the second computational chain. 
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